(Delphi ActiveX) Install PFX Certificates and Private Keys to Windows

Demonstrates how to install the certificates and private keys contained in a PFX to the Windows certificate stores.

Note: This example requires Chilkat v9.5.0.83 or greater.

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
pfx: TChilkatPfx;
success: Integer;
exportable: Integer;
userProtected: Integer;
machineKeyset: Integer;
allowOverwriteKey: Integer;
allowExport: Integer;
leafStore: WideString;
intermediateStore: WideString;
rootStore: WideString;
json: IChilkatJsonObject;

begin
// Note: This example requires Chilkat v9.5.0.83 or greater.

pfx := TChilkatPfx.Create(Self);

success := pfx.LoadPfxFile('qa_data/pfx/test_secret.pfx','secret');
if (success = 0) then
  begin
    Memo1.Lines.Add(pfx.LastErrorText);
    Exit;
  end;

// See the online reference documentation for more information about the ImportToWindows method.

// Mark imported privae keys as exportable.
exportable := 1;

// If userProtected is 1, the user is to be notified through a dialog box or other method when certain attempts to use this key are made. 
userProtected := 0;

// If machineKeyset is 1, the private keys are stored under the local computer and not under the current user. 
machineKeyset := 0;

// If allowOverwriteKey is 1, allow overwrite of the existing key. 
allowOverwriteKey := 0;

// If allowExport is 1, then the imported key can later be exported back to a PFX.
// (It also allows for applications to directly access the private key material.)
allowExport := 1;

// Indicate where to import types of certs.
leafStore := 'My';
intermediateStore := 'CertificationAuthority';
rootStore := 'AuthRoot';

success := pfx.ImportToWindows(exportable,userProtected,machineKeyset,allowOverwriteKey,allowExport,leafStore,intermediateStore,rootStore,'');
if (success = 0) then
  begin
    Memo1.Lines.Add(pfx.LastErrorText);
    Exit;
  end;

// Show information about the certificates imported
json := pfx.LastJsonData();
json.EmitCompact := 0;
Memo1.Lines.Add(json.Emit());

// Sample LastJsonData:

// {
//   "exportable": true,
//   "userProtected": false,
//   "machineKeyset": false,
//   "allowOverwriteKey": false,
//   "allowExport": true,
//   "key": [
//     {
//       "name": "{F09B755A-1E90-444D-9851-02B86CA14961}",
//       "storageProvider": "Microsoft Software Key Storage Provider"
//     }
//   ],
//   "cert": [
//     {
//       "DN": "...",
//       "type": "intermediate",
//       "storeName": "CertificationAuthority",
//       "imported": true
//     },
//     {
//       "DN": "...",
//       "type": "root",
//       "storeName": "AuthRoot",
//       "imported": true
//     },
//     {
//       "DN": "....",
//       "type": "leaf",
//       "storeName": "My",
//       "keyContainer": "{345D4EAD-B8DD-4150-9A1F-4BC6437E77A2}",
//       "machineKeyset": true,
//       "imported": true
//     }
//   ]
// }

Memo1.Lines.Add('Success.');
end;